To enable stronger protection on base objects, the following registry setting informs the Windows NT Session Manager that security on the base system objects should be at C2 security level. Impacts of this change are varied and information is sparse. …
You can use the following to speed up tape backups. To control how long Windows NT’s NTBackup program waits on an open file or skips open files, set the following Windows NT registry hacks: Hive: HKEY_CURRENT_USERKey: Software\Microsoft\Ntbackup\User InterfaceName: Wait timeType: …
Windows NT Backup Control Skip Wait or Skip Open Files Read More »
If an unauthorized user can restore files to a new directory, they can compromise those files. To catch such activity, requires full privilege auditing . To enable, apply the following Windows NT registry hack: Hive: HKEY_LOCAL_MACHINEKey: SYSTEM\CurrentControlSet\Control\LsaName: FullPrivilegeAuditingType: REG_DWORDValue: 1Full …
ntbackup.exeRun Windows NT’s built in tape backup program and select the Backup Local Registry check box in the Backup Information dialog. NTBackup can not back up or restore the registry of a remote computer – only the local system. rdisk.exeRdisk …
You have an application that starts everytime you logon. Why? The obvious place to check is the Startup folder: right-click Start, Open, double-click Programs, double-click Startup folder. If its not in Startup, there are several places that a hidden application …
NT supports autorun when you put a CD in the CDROM. To disable, set Autorun=0 to enable, set Autorun=1. If Autorun is enabled, you can disable the feature for any particular CD by holding down the shift key as you …
On a dedicated special function server such as print server or application server, one might want to bypass the Logon dialog box and automatically logon to the server. Not recommended. If you want to set it on your standalone workstation …
To control whether NT includes AUTOEXEC.BAT’s path statement in NT’s PATH environmental variable cut and paste the following code into paths.reg file and run it. REGEDIT4 BLANK LINE GOES HERE[HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]“ParseAutoexec”=”1” BLANK LINE GOES HERE Set ParseAutoexec=0 if you do …
Add paths in autoexec to NT’s PATH environmental variable Read More »
Events to Audit Description Query Value Reads a value entry from a Registry key Set Value Sets value entries in a Registry key Create Subkey Create subkeys on a selected Registry key Enumerate Subkeys Audits events that attempt to identify …
In a environment with a need to ensure that there are no unaudited events, when its critical to save the potential forensics of the event logs, the follow registry key will force Windows NT or Windows 2000 to crash when …
